top of page


Elevate Your Undestanding

Controls without Systems are not Controls

Controls without systems are not controls, they are only processes.

In many compliance domains meeting obligations is seen as a controls problem. As a result, documenting, building, managing, and monitoring controls is at the forefront of compliance activities.

This is reinforced if not driven by industry management system standards which conceptualize compliance in the same way and provide a long list of controls that you “should” implement.

However, focusing solely on controls often results in losing sight of the big picture. Many have lost sight of the forest for the trees.

Don't lose sight of complaince for the controls
Don't lose sight of complaince for the controls

Controls are processes that adjust operating system parameters to maintain output between targeted values. Technically, controls perform the function of regulation needed to achieve compliance to a given standard of performance. This applies to all systems including socio-technical ones.

SControls Regulate Systems
Controls Regulate Systems

However, all too often controls are implemented without knowledge of what they are intended to control, how they work, or what they are supposed to accomplish. Many may not be connected to the systems they are intended to control. They may even operate at cross-purposes implemented to work separately and not together. This is definitely a significant source of compliance waste.

Instead of compliance systems, many organizations have control management systems often not doing more than mapping controls to regulatory elements. They might even have all the boxes checked and able to pass an audit.

What many organizations don’t have (but need) are controlled systems to deliver on commitments associated with their obligations. They need systems capable of creating the outcomes of compliance.

Compliance is about regulation and you cannot regulate without a system – you cannot regulate with controls alone.

If you are not realizing desired outcomes from your compliance efforts, check to make sure your controls are connected, operational, and are effective at regulating your safety, security, sustainability, quality, environmental, regulatory and ethics systems.

Don’t lose sight of compliance for the controls.

  • Feb 22, 2024, 1:00 p.m. – 2:30 p.m. EST
    Free Online Webinar
    This presentation addresses the urgency of ethical considerations in artificial intelligence. It explores the meaning of ethics, including integrity, morality, and trust. Emphasizing the shift from "can" to "should."
  • Mar 28, 2024, 1:00 p.m. – 2:30 p.m. EDT
    Free Online Webinar
    Join us as we spotlight the pivotal role of Compliance Programs in bridging the gap between governance and management systems. Discover how leadership intentions materialize into actionable management realities, steering your operational objectives towards better organizational outcomes.
Operational Compliance - Primer

"For Compliance to be Effective,

It First Must be Operational."

Download our Free

Operational Compliance - Primer


bottom of page